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Virus Outbreak Detected 



Execute Step 1 
Confirm Step 2 
Execute Step 2 
Execute Step 3 
Execute Step 4 
Confirm Step 5 
Execute Step 5 




Escalation time 4 



Escalation time 2 



Escalation time 3 



Escalation time 1 



Leqend: 



Predefined Actions To Be Followed Upon Detection of Outbreak 

Such actions may optionally include: 

1 . Reducing virus detection notification; 

2. Switching from virus quarantining to virus deletion when a computer 
virus is detected; 

3. Increasing scan options that control how thoroughly the computer 
system is scanned to detect a computer virus; 

4. Sending a copy of the detected computer virus to a remote site for 
analysis; 

5. Downloading a latest virus definition file from a remote site; 

6. Performing a complete virus scan of all computer files stored in at 
least a portion of the computer apparatus; 

7. Blocking e-mail attachments to block identical attachments appearing 
in excess of a threshold level; 

8. Rendering non-accessible e-mail distribution lists and e-niai! address 
books of e-mail clients coupled to the computer apparatus; 

9. Restarting in administrator mode an e-mail post office coupled to the 
computer apparatus; and 

10. Closing down an e-mail post office coupled to the computer 
apparatus. 
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Emergency Response Event 



Which type of event do you wish to create? 
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Emergency Response Event 




Which type of reaction do you wish for this event? 
©Manual 
O Automatic 


□ Notify by email 

□ Notify by network broadcast 

□ Notify by pager 


Reaction description (click on an underlined value to edit it) 


React manually to an emergency response but notify me 
via email address email addres5^ 


1 <eack 1 Next> | | Cancel | | | 
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Emergency Response Event 




Specify the actions and step to carry out: 



Step I Action" 



0 Update DAT files (GroupShield Exc. 

1 Reduce notifications (GroupShield 



I Escalation Time J 



0 hr{s) 1 min(s) 
0 hr(s) lOmin(s) 



I Move Up 1 1 Move Down I Ll^d"" ](| gemove j 
□ Create an emergency response report 



j <Back I Next> [ [ Cancel ( | Help | 
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Emergency Response Event 






Specify the name for this event : 




es™ _ 1 


Event Summary : 


Event Name ; 'Number of Identical Attachment types in a Time 
Event Desc : 500 identical attachment types In 1 hours 20 minu H 
Reaction to an Emergency is Automatic 

Emarl Notification is Enabled. Email will be sent to 'a@a.com' H 
Automatic Actions 


Step, Action and escalation times H 




0 Update DAT files (0 hr(s) 1 min(s)) | 


1 <Back 1 Finish | | Cancel | | Help | 
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